Has anyone ever figured out how to use FIDO2 with Discourse behind a reverse proxy? I’m having this issue using the web.socketed.template.yml template with a forum behind a Cloudflare Tunnel. Neither Yubikey 2FA nor the new Passkey logins are working for me.

Is this on a dev environment? You might need to override this bit temporarily: lib/discourse_webauthn.rb main end ## # Clears the challenge from the user's server session. # # @param user [User] the user to cle…

No, this is a production install.

What error messages are you getting?

What is the full URL of the failed request, /auth.json?

Ah, no: /session/passkey/auth.json

Ok, so your server thinks that it is not running on the hostname that the browser is requesting. The security key / passkey generation procedure has to ensure that the the hostname of the browser matches that of the server (keys are generated per hostname). Can you log into your Rails console and c…

Discourse.current_hostname does match the URL I use to access the site. Is there a way to see what Discourse thinks the hostname my browser is requesting is?

What do you get for Discourse.base_url in the console?

How to use FIDO2 with Discourse behind a reverse proxy?

Support Self-hosting

pmusaraj (Penar Musaraj) January 9, 2024, 8:56pm 9

Note, this could be a http vs https issue as well. I see the logo is looking for a URL under http:// on your site.

Topic		Replies	Views
Cannot get yubikey working Support	3	878	February 23, 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	July 15, 2024
Error when create user passkey in browser Support passkey	12	739	October 30, 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	March 13, 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	January 30, 2024

How to use FIDO2 with Discourse behind a reverse proxy?

Related topics